Basic Administration > Supporting Collaboration > Workflow Administration > Workflow Management > Managing Workflow Security > Restricting Workflow-Embedded Java Code
  
Restricting Workflow-Embedded Java Code
An additional level of control has been provided for the site administrator to restrict which users can create and modify Java expressions within workflow templates. This is done by specifying membership in at least one of three of the following site context groups:
Administrators
Workflow Administrators
Workflow Author
A user must be part of one of the above listed groups to have permission to embed Java code in workflows templates.
When a user attempts to add or modify expression code, the system will perform an additional check to verify that the user is a member of at least one of these three groups defined in the Site context. If the user is not a member of at least one of these three groups, all expression code input fields in the Workflow Template Editor will be disabled. Furthermore, the workflow service will prevent saving a template with modified expression code, in cases where the workflow template may be created through other means.